d619d86c4c
fix: replace dangerous expression evaluation with AST-validated safe math parser (CWE-95)
...
Replace unconstrained expression evaluation in calculate_math tool
handlers with safe_eval_math(), which parses into an AST and only
allows literal numbers and basic arithmetic operators. Function calls,
attribute access, and name lookups are rejected, preventing arbitrary
code execution via prompt injection through LLM-generated tool calls.
Affected files:
- scripts/web_demo.py (Streamlit demo)
- scripts/eval_toolcall.py (tool call testing)
- trainer/train_agent.py (agent training)
2026-04-23 19:36:39 +01:00
5704766352
[update] tie embedding
2026-04-19 21:57:28 +08:00
5351424bf0
[fix] lora moe
2026-04-09 16:36:48 +08:00
b7e0ae21d6
[update] default model
2026-03-31 13:40:16 +08:00
6b0b0c5e2f
[update] fp16 inference
2026-03-27 16:29:46 +08:00
101d7df2da
[update] minimind-3
2026-03-25 23:57:45 +08:00
04616c41a5
[update] safe half
2026-01-30 20:29:31 +08:00
07364c3fbe
[update] rename train tokenizer
2026-01-06 01:17:33 +08:00
a8455ca8a3
[fix] messages num
2026-01-04 11:03:16 +08:00
eead9538b2
[feat] update config
2025-12-31 10:29:13 +08:00
936d105e9b
[feat] compatible tokenizer
2025-12-31 10:26:46 +08:00
81e869fc3e
[fix] harmonize template
2025-11-06 13:14:08 +08:00
509d8dacf1
[feat] clear cache
2025-11-06 13:12:28 +08:00
8a0b04ed82
[fix] harmonize template
2025-11-02 23:18:11 +08:00
08ce3da228
[feat] update args
2025-10-30 10:48:31 +08:00
bf123b585d
[feat] add args
2025-10-30 10:05:12 +08:00
28cc44579a
[feat] convert2llama
2025-10-23 20:22:42 +08:00
7d877db79b
[feat] minimind-2510
2025-10-21 21:19:47 +08:00
2e118e9d3d
update convert script
2025-04-27 15:44:40 +08:00
a62faf34bd
250426
2025-04-26 10:05:47 +08:00
7da201a944
update chat-openai-api
2025-04-18 12:43:57 +08:00
4a758564e4
fix top_p float bug
2025-04-09 16:52:20 +08:00
08e9a22a25
update web_demo
2025-04-04 11:25:40 +08:00
c1a77f5c0f
update web_demo
2025-02-14 19:38:55 +08:00
d519d2a233
update web_demo
2025-02-14 19:37:27 +08:00
b5d10d9a7d
fix bugs
2025-02-13 20:56:14 +08:00
c9ca0f57dc
update config
2025-02-10 00:14:11 +08:00
29d6cd9cd2
update scripts file
2025-02-09 23:52:50 +08:00
58e3af0359
add minimind2
2025-02-09 23:49:47 +08:00
Sebastion
jingyaogong
gongjy